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Security subsystem 

creates a master 
key pair and stores 
the master key pair 
in protected 
storage 
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code 
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in protected 
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Security subsystem 
validates signature 

by reading master 
public key from 

protected storage 



Security subsystem 
uses master public 
key to decrypt 
signature and 
determine whether 
the signature is 
authentic 
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application 
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